GoKawiilUnsealed warrant details how hackers stole Staples customer-support sessions to mint 15,000+ gift cards
A newly unsealed search warrant application says attackers remotely accessed Staples' internal customer-support application, dubbed Nexus, and pulled memory data that let them hijack active employee login sessions. Using those hijacked sessions, the group issued more than 15,000 gift cards worth over $5 million for retailers including Staples, Target and Sephora, then used the cards to buy electronics and other goods, much of it shipped to China. The filing does not name Staples directly, but 404 Media identified the retailer through corporate details and the Nexus system name.
GoKawiil's interpretation of the reporting above, not reported fact.
The case shows how a single internal support tool, if poorly isolated from outside access, can become a pipeline for large-scale retail fraud spanning multiple brands, according to the warrant application. It also suggests organized crime groups are increasingly combining technical intrusion skills with traditional retail theft logistics to monetize stolen access quickly. The unresolved question of how attackers first reached Nexus from outside the network points to a broader vulnerability in how retailers secure supposedly internal-only systems.
- Hackers issued over 15,000 fraudulent gift cards worth more than $5 million by hijacking live customer-service sessions.
- The compromised system, called Nexus, was believed accessible only from internal company computers.
- Stolen gift cards were used to buy electronics and merchandise, much of it shipped to China, per the unsealed warrant.
Source: techspot.com — Skye Jacobs, 2026-10-21
Published there as: “Staples hackers created more than 15,000 gift cards, then went on a shopping spree”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.